CVE-2022-43468

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2022-43468
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-43468.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-43468
Published
2022-12-07T04:15:10.723Z
Modified
2026-04-10T04:52:05.600112Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVSS Calculator
Summary
[none]
Details

External initialization of trusted variables or data stores vulnerability exists in WordPress Popular Posts 6.0.5 and earlier, therefore the vulnerable product accepts untrusted external inputs to update certain internal variables. As a result, the number of views for an article may be manipulated through a crafted input.

References

Affected packages

Git / github.com/cabrerahector/wordpress-popular-posts

Affected ranges

Type
GIT
Repo
https://github.com/cabrerahector/wordpress-popular-posts
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
6d178787f6fb95b1505e16b0171da6df0e00172a
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "6.0.5"
        }
    ]
}

Affected versions

2.*
2.3.6
2.3.7
3.*
3.0.0
3.0.0-alpha-1
3.0.0-alpha-2
3.0.0-alpha-4
3.0.0-beta-1
3.0.0-beta-2
3.0.1
3.0.2
3.0.2-beta-1
3.0.3
3.0.4-beta-1
3.0.4-beta-2
3.0.4-beta-3
3.0.4-beta-4
3.0.4-beta-5
3.1.0
3.1.0-beta-1
3.1.0-beta-2
3.1.0-beta-3
3.1.1
3.1.1-beta-1
3.1.1-beta-2
3.1.2-beta-1
3.2.0
3.2.0-beta-1
3.2.0-beta-2
3.2.1
3.2.2
3.2.2-beta-1
3.2.2-beta-2
3.2.2-beta-3
3.2.3
3.2.3-beta-1
3.2.3-beta-2
3.2.3-beta-3
3.3.0
3.3.0-beta-1
3.3.1
3.3.2
3.3.2-beta-1
3.3.3
3.3.4
3.3.4-final
4.*
4.0.0
4.0.1
4.0.1-beta-1
4.0.1-beta-2
4.0.10
4.0.11
4.0.12
4.0.13
4.0.2
4.0.3
4.0.5
4.0.6
4.0.7-beta-1
4.0.7-beta-2
4.0.7-beta-3
4.0.7-beta-4
4.0.8
4.0.9
4.1.0
4.1.1
4.1.2
4.2.0
4.2.1
4.2.2
5.*
5.0.0
5.0.1
5.0.1-beta-1
5.0.2
5.1.0
5.2.0
5.2.1
5.2.2
5.2.3
5.2.4
5.3.0
5.3.1
5.3.2
5.3.4
5.3.5
5.3.6
5.4.0
5.4.1
5.4.2
5.5.0
5.5.1
6.*
6.0.0
6.0.1
6.0.2
6.0.3
6.0.4
6.0.5

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-43468.json"